Trojan popup on OGR?

John, I think it must be something local to you. Note that it says this happened on an OUTBOUND connection. That’s something originating on your machine, not something coming from the OGR forum server. As further evidence, I just opened that thread on two PCs, a MAC and my IPad. No pop up.

Clear your cookies and cache in Firefox and see if it still happens.

Tons of phishing and spamming going on right now. Watch emails and unusual alerts and be careful what you click on.

I received this from my IT department this morning.

As we get more comfortable working from home, cyber attackers have quickly adjusted to this new situation. We are currently tracking a significant world-wide increase in the amount of phishing attempts targeting people working at home. In addition to common phishing messages, scams revolving around the Coronavirus and scams related to tax returns are becoming more prevalent. 

It's just like these cowards to take advantage.

I think that your antivirus software is warning you of a potential Trojan horse virus. 

I know that George, the question is why?  It only happens in that one thread, and I don't have issues anywhere else.

Gunrunnerjohn,

I was getting the same alert from my antivirus software a week or so ago and, like you, only on one thread.

I alerted the OGR Forum team and they searched the thread with their software and found nothing. I am no longer getting a warning when opening that thread, 

John,

If you white-list that exact thread address in your anti-virus and firewall programs, the issue might disappear.  Hard to tell if you will ever figure out what caused the problem.

Chuck

I think I'll just ignore it for now. 

No problem on my Amazon tablet 

Dave

Are you using Firefox or Mozilla for your browser? It could be specific to that.

George

I just tried the link in John's first post and my malwarebytes grabbed as a trojan.  There is definitely something in that thread.

dick

You are absolutely right. The photo of the repainted engine posted by Norton was an image being served by localnet.com. If you note the data in the John's first post about this, the trojan was coming from localnet.com.

I posted this within the post over there to let the member know what was going on.

FROM THE FORUM ADMIN STAFF:
We deleted the image you linked to from http://members.localnet.com. The localnet.com site was attempting to force a trojan malware download to people viewing this thread.

In all fairness, I don't think Member Norton had any idea that this was happening.

Flyboy62 posted:

I just tried the link in John's first post and my malwarebytes grabbed as a trojan.  There is definitely something in that thread.

dick

 

Melwarebytes is A+ in my opinion.

I have that program and McAffee. In the case I mentioned above McAffee did not respond to the Trojan threat, Malwarebytes did.

Just FYI

Nice detective work, and I'm glad to know it wasn't my end.  I had no idea that Localnet.com was malicious, but I'll certainly keep my distance from them!

Malwarebytes is my # 1 anti-virus!

Goes to show how easily this stuff happens.

That's right, it wasn't John's picture. I should have looked at the file name more closely. Sorry John! 

The Chrome browser blocked the download with its internal security settings, so it never got to my anti-virus software.

George

My ears are still burning George, but I'll recover.